CoreCVE
Back

HIGH

Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products

Published Feb 17, 2009

Description

Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (7)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Feb 17, 2009
Updated Aug 7, 2024
Reserved Jan 29, 2009
Link CVE-2009-0363
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2009-0363
Red Hat
Severity n/a
Public date n/a
Links CVE-2009-0363
ENISA EUVD
Assigner mitre
Published Feb 17, 2009
Updated Aug 7, 2024
Exploited since n/a
Link EUVD-2009-0367
EUVD-2009-0367